I personally don't think it's very funny to DOS a server during prime drinking hours, and then make a sysadmin deal with a broken server on a hangover. But there you go, whatever turns you on.

We do apply patches within 24 hours of a notice (and there are plenty of them!) but running an aging server like this with so many virtualhosts and legacy code leaves plenty of holes for someone wanting to fluff their ego by making other people unhappy.